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Detailed Action 

1 . This action is responsive to communication filed on: 22 February 2008 with 
acknowledgement of an original application filed 15 September 2003. 

2. Claims 2-13 are currently pending in this application. Claims 2, 7, and 9 are independent 
claims. 

Response to Arguments 

3. Applicant's arguments filed 22 February 2008 have been fiilly considered however they 
are not persuasive. 

I) In response to applicant's arguments on page 5, "With respect to claim 2, 7, and 9, Du 
does not disclose the present invention as recited in the pending claims. For example, Du does 
not disclose a device that, for example, allows authenticating a subscriber for access to a 
requested service based upon receiving a code from a terminal device, the code indicating that a 
unique username and password will not be provided by the terminal device " 

The Examiner disagrees with the argument as indicated by ' 152 "The user uses the 
computer in his usual fashion. For example, when the user is in his network browser, the 
invention allows him to enter networks and Web sites that require a login procedure and, using 
the user's passwords stored on the smart card 1002, automatically login to the site". This is the 
same meaning the device, i.e. smartcard provides the access credentials needed without the user 
or terminal entering the password. 

II) In response to applicant's argument on page 5, "This deficiency is not obviated ifDu 
is attempted to be combined with Barriga-Caceres. Barriga-Caceres dos not disclosed the same 
problem, nor does it resolve the same problem. 
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The Examiner disagrees with argument for multiple reasons. One Du discloses the 
limitation as indicated above. Two Barriga-Caceres and Du were combined to teach 
authenticating a subscriber to a service. The motivation to combine as stated in the Office 
Action is to improve access to services. 

Ill) In response to applicant's argument on page 6, "With respect to claims 3-6, 8, and 
10-13, these claims depend from one of claims 2, 7, or 9 respectively. Since netiher Du nor 
Barriga-Caceres discloses all of the limitations of claims 2, 7, or 9," 

The Examiner disagrees as indicated above the limitations of the independent claims 
were taught in Du and Barriga-Caceres; therefore the dependent claims are rejected. 



Claim Rejections - 35 USC § 103 

4. The following is a quotation of 35 U.S. C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or 
described as set forth in section 102 of this title, if the differences between the subject matter 
sought to be patented and the prior art are such that the subject matter as a whole would have 
been obvious at the time the invention was made to a person having ordinary skill in the art 
to which said subject matter pertains. Patentability shall not be negatived by the manner in 
which the invention was made. 



5. Claims 2-13, are rejected under 35 U.S.C. 103(a) as being unpatentable Du et al. U.S. 
Patent No. 6,981,152 (hereinafter '152) in view of Barriga-Caceres et al. US Patent No. 
7,221,935 (hereinafter '935). 

As to independent claim 2, "A device comprising: a processor; and logic which, when 
applied to the processor in response to receiving a service request, results in locating a 
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subscriber identifier corresponding to an IP address; locating subscriber information 
corresponding to the identifier" is taught in '152 col. 9, lines 13-42; 

"the code indicating that a unique username and password will not be provided by the 
terminal device" is shown in '152 col. 9, lines 24-35; 

the following is not taught in '152: "authenticating a subscriber for access to a requested 
service based upon receiving a code from a terminal device" however '935 teaches providing 
access to a service in col. 6, lines 43-67. 

It would have been obvious to one of ordinary skill in the art at the time of the invention 

to modify the teachings of ' 1 52 a method of utilizing a smartcard to access web sites that allows 
card's ID to include a means where the access is to a 'service'. One in the art would have been 
motivated to perform such a modification because it would allow mobile users to access services 
easily and improve mobile commerce (see '935 col. 2, lines 23 et seq.) "More specifically, the 
users have the advantage of the SSO service for accessing any service at any Service Provider 
(SP) within the reference model agreement. The Mobile Network Operators (MNO) may obtain 
revenues by offering SSO services, in particular authentication and authorization, to third parties 
as well as keeping subscribers loyalty by adding value to their respective mobile subscriptions. 
Eventually, the Service Providers may experience an increase of potential users, namely mobile 
subscribers, with a simpler and much safer authentication and authorization mechanisms 
minimizing the support for different such mechanisms depending on the different nature of users. 
In this scenario Authentication Provider and Service Provider belong to different administrative 
domains. At the same time, these distributed advantages favor an increase of a so-called mobile 
commerce (m-commerce), which can be regarded as a further object of the present invention". 
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As to dependent claim 3, "further comprising: logic which, when applied to the 
processor, results in communication of the code and IP address to a service provider" is 
disclosed in '152 col. 9, lines 30-40. 

As to dependent claim 4, "further comprising: logic which, when applied to the 
processor, results in forming an account name from the identifier" is taught in '152 col. 9, 
lines 30-40. 

As to dependent claim 5, "wherein the identifier is an MSISDN" however '935 teaches 
the identifier can be an MSISDN in col. 14, lines 39-64. 

As to dependent claim 6, "further comprising: logic which, when applied to the 
processor, results in querying a RADIUS server to locate the subscriber identifier 
corresponding to the IP address" however '935 teaches the use of a RADIUS server in col. 14, 
lines 39-64. 

As to independent claim 7, "A terminal device comprising: a processor; and logic 
which, when applied to the processor, results in communicating to a network, in lieu of a 
user name and password, a code to cause the network to authenticate" is taught in ' 152 
col. 9, lines 13-42; 

"and upon a unique identifier provided by the terminal device to the network during 

an earlier attach process" is shown in '152 col. 4, lines 1-37; 

the following is not taught in '152: "and authorize access to a service the authentication and 
authorization based upon an IP address assigned to the terminal device by the network" 

however '935 teaches providing access to a service in col. 6, lines 43-67. 



Application/Control Number: 10/662,656 Page 6 

Art Unit: 2134 

It would have been obvious to one of ordinary skill in the art at the time of the invention 
to modify the teachings of ' 152 a method of utilizing a smartcard to access web sites that allows 
card's ID to include a means where the access is to a 'service'. One in the art would have been 
motivated to perform such a modification because it would allow mobile users to access services 
easily and improve mobile commerce (see '935 col. 2, lines 23 et seq.) "More specifically, the 
users have the advantage of the SSO service for accessing any service at any Service Provider 
(SP) within the reference model agreement. The Mobile Network Operators (MNO) may obtain 
revenues by offering SSO services, in particular authentication and authorization, to third parties 
as well as keeping subscribers loyalty by adding value to their respective mobile subscripfions. 
Eventually, the Service Providers may experience an increase of potential users, namely mobile 
subscribers, with a simpler and much safer authentication and authorization mechanisms 
minimizing the support for different such mechanisms depending on the different nature of users. 
In this scenario Authentication Provider and Service Provider belong to different administrative 
domains. At the same time, these distributed advantages favor an increase of a so-called mobile 
commerce (m-commerce), which can be regarded as a further object of the present invention". 

As to dependent claim 8, "further comprising: client logic associated with a service 
provider, which, when applied to the processor to access the service provider, results in 
communicating the code and IP address to the network in lieu of communicating a user 
name and password" is shown in '152 col. 9, lines 24-35. 

As to independent claim 9, "A method comprising: receiving a code from a terminal 
device that indicates that a user name and password" is taught in '152 col. 4, lines 1-37; 
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"locating a subscriber identifier corresponding to an IP address of tlie terminal 
device; locating subscriber information corresponding to the identifier" is shown in '152 
col. 9, lines 13-42; 

the following is not taught in '152: "and determining whether a subscriber has access to a 
requested service" however '935 teaches providing access to a service in col. 6, lines 43-67. 

It would have been obvious to one of ordinary skill in the art at the time of the invention 
to modify the teachings of ' 152 a method of utilizing a smartcard to access web sites that allows 
card's ID to include a means where the access is to a 'service'. One in the art would have been 
motivated to perform such a modification because it would allow mobile users to access services 
easily and improve mobile commerce (see '935 col. 2, lines 23 et seq.) "More specifically, the 
users have the advantage of the SSO service for accessing any service at any Service Provider 
(SP) within the reference model agreement. The Mobile Network Operators (MNO) may obtain 
revenues by offering SSO services, in particular authentication and authorization, to third parties 
as well as keeping subscribers loyalty by adding value to their respective mobile subscriptions. 
Eventually, the Service Providers may experience an increase of potential users, namely mobile 
subscribers, with a simpler and much safer authentication and authorization mechanisms 
minimizing the support for different such mechanisms depending on the different nature of users. 
In this scenario Authentication Provider and Service Provider belong to different administrative 
domains. At the same time, these distributed advantages favor an increase of a so-called mobile 
commerce (m-commerce), which can be regarded as a fiirther object of the present invention". 

As to dependent claim 10, "further comprising: communicating the code and IP 
address to at least one service provider to obtain authorization for the services of the at 
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least one service provider" however '935 teaches providing access to a service in col. 6, lines 
43-67. 

As to dependent claim 11, "further comprising: forming from the identifier an account 
name for the subscriber" is taught in '152 col. 9, lines 30-40. 

As to dependent claim 12, "wherein the identifier is an MSISDN" however '935 teaches 
the identifier can be an MSISDN in col. 14, lines 39-64. 

As to dependent claim 13, "further comprising: querying a RADIUS server to locate 
the MSISDN corresponding to the IP address" however '935 teaches the use of a RADIUS 
server in col. 14, lines 39-64. 

Conclusion 

THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). Applicant is reminded of the 
extension of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS fi-om the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 
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6. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Ellen C Tran whose telephone number is 
(571) 272-3842. The examiner can normally be reached from 7:30 am to 4:00 pm. If attempts 
to reach the examiner by telephone are unsuccessful, the examiner's supervisor, Kambiz Zand 
can be reached on (571) 272-381 1 . The fax phone number for the organization where this 
application or proceeding is assigned is (571) 273-8300. 

Information regarding the status of an apphcation may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 

/ELLEN TRAN/ 

Primary Examiner, Art Unit 2134 

6 June 2008 



